$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: 9qkKpwNGbmvnAX/C0mAB9bE6tk64CZeGHmnvvsMBbx8= Subject key identifier: 1F:0E:7A:A3:C7:72:1B:D8:17:12:7E:D7:A7:70:42:7A:8F:6A:19:38 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 0196B935A5FED2D283F6B5ED0ED7B5D904BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 122C Signing time: Sat 10 May 2025 08:00:22 +0000 Manifest this update: Sat 10 May 2025 08:00:22 +0000 Manifest next update: Sun 11 May 2025 08:00:22 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: 43gC9sbDIv0B2wl64HbvYhKnlIXrno6bUUgy18YzedM=) 6: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 7: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 8: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 9: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 10: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 11: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 12: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 13: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 14: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 15: nuAp8jQeL57cxcv-qMziP5TUwtY.roa (hash: vb4FRcaEF1fztUtawfL6ZNK658gxKBaRE6cvTVdZv2U=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b9:35:a5:fe:d2:d2:83:f6:b5:ed:0e:d7:b5:d9:04:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: May 10 08:00:22 2025 GMT Not After : May 11 08:00:22 2025 GMT Subject: CN=1f0e7aa3c7721bd817127ed7a770427a8f6a1938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:95:c8:8f:f8:17:aa:65:b7:bc:9a:3d:90: 33:32:86:de:dc:af:0b:88:aa:46:23:49:f3:d4:a4: 93:35:37:22:4a:28:11:3b:b7:44:13:5d:f0:9f:27: 63:17:bd:63:a5:77:0c:71:9e:b4:15:0c:b0:9a:72: 91:27:d8:b7:bc:43:02:06:12:c9:13:1a:5a:ef:83: 69:cb:52:58:75:e9:9b:54:53:4c:03:d6:2d:85:61: 92:39:83:90:f3:04:9c:4e:a5:d4:3e:d5:0b:90:c3: b0:9a:a8:60:73:17:7e:a1:d2:80:ee:b2:dc:90:6f: 75:c3:74:db:d7:52:36:f7:da:9e:7e:98:44:a5:a2: b9:12:f2:f6:fd:45:93:5a:4b:f4:97:9c:f8:e0:7a: d7:5b:17:90:e0:72:c7:b8:cd:3b:60:66:8b:b2:a8: 38:ac:98:45:05:84:62:8a:98:c1:30:9d:14:9b:01: fa:8e:20:b4:9f:da:29:ea:11:c0:70:e5:2e:32:31: 83:7d:cb:e3:2f:8e:7c:ed:fd:40:51:f8:02:40:2d: e2:19:37:45:bb:71:e4:29:4f:68:8e:6c:19:6b:22: 4b:14:ca:e7:7a:78:ed:dd:31:04:79:e1:a8:cc:17: 99:54:25:4e:b5:2d:e3:98:f1:fd:f0:77:b2:20:88: 8c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0E:7A:A3:C7:72:1B:D8:17:12:7E:D7:A7:70:42:7A:8F:6A:19:38 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ac:47:38:93:b7:83:aa:9e:95:4e:08:54:38:27:19:a7:39: 85:00:b2:cf:49:59:c7:22:8c:3b:25:6d:3d:0f:c0:f5:ec:36: 9c:ad:71:3e:20:eb:d2:14:c8:c1:f1:d9:61:a6:b6:91:20:cc: 53:d1:fc:80:ad:40:26:cb:7e:2b:f8:cf:c6:05:b2:b9:58:09: 0b:2d:bb:5d:ba:bb:ae:d6:26:f6:55:47:b7:97:ca:5f:4a:50: f1:65:53:40:d9:05:45:c2:2c:84:6d:0a:47:ca:2e:fb:e2:44: 9c:e9:ac:6d:4c:10:f3:2a:d9:89:de:4f:2a:ec:b0:1b:fa:a6: 10:cb:56:3c:bf:b9:bf:20:9e:65:dc:df:55:70:37:b1:07:09: 08:99:66:4a:7b:61:1a:ad:e8:32:61:d6:25:86:f0:9a:34:c9: 88:8a:3a:1e:8e:90:c0:05:8c:5f:14:36:33:f7:18:21:75:ea: e9:9b:46:e1:fa:13:e8:02:4a:34:43:f4:e6:9a:88:10:19:04: ec:61:8e:14:a6:fd:02:12:62:a1:f8:1b:4b:4f:ad:bb:dc:4c: d8:94:57:b2:91:26:5d:9f:69:c2:c1:bd:0c:c6:d1:35:65:78: de:60:eb:1a:28:18:65:d3:6b:e4:d0:47:6d:4d:2e:b7:b5:79: 16:e5:a8:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa5NaX+0tKD9rXtDte12QS/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUwNTEwMDgwMDIyWhcNMjUwNTExMDgwMDIyWjAzMTEwLwYDVQQD EygxZjBlN2FhM2M3NzIxYmQ4MTcxMjdlZDdhNzcwNDI3YThmNmExOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyguVyI/4F6plt7yaPZAzMobe3K8L iKpGI0nz1KSTNTciSigRO7dEE13wnydjF71jpXcMcZ60FQywmnKRJ9i3vEMCBhLJ Expa74Npy1JYdembVFNMA9YthWGSOYOQ8wScTqXUPtULkMOwmqhgcxd+odKA7rLc kG91w3Tb11I299qefphEpaK5EvL2/UWTWkv0l5z44HrXWxeQ4HLHuM07YGaLsqg4 rJhFBYRiipjBMJ0UmwH6jiC0n9op6hHAcOUuMjGDfcvjL4587f1AUfgCQC3iGTdF u3HkKU9ojmwZayJLFMrnenjt3TEEeeGozBeZVCVOtS3jmPH98HeyIIiMMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8OeqPHchvYFxJ+16dwQnqPahk4MB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaxHOJO3 g6qelU4IVDgnGac5hQCyz0lZxyKMOyVtPQ/A9ew2nK1xPiDr0hTIwfHZYaa2kSDM U9H8gK1AJst+K/jPxgWyuVgJCy27Xbq7rtYm9lVHt5fKX0pQ8WVTQNkFRcIshG0K R8ou++JEnOmsbUwQ8yrZid5PKuywG/qmEMtWPL+5vyCeZdzfVXA3sQcJCJlmSnth Gq3oMmHWJYbwmjTJiIo6Ho6QwAWMXxQ2M/cYIXXq6ZtG4foT6AJKNEP05pqIEBkE 7GGOFKb9AhJiofgbS0+tu9xM2JRXspEmXZ9pwsG9DMbRNWV43mDrGigYZdNr5NBH bU0ut7V5FuWoHQ== -----END CERTIFICATE-----Generated at Sat May 10 13:16:56 2025 by rpki-client